fuklief

37 ms·

1.
by fuklief 1mo ago
Congrats on the 30 years of marriage!
2.
by fuklief 2y ago
> It's better to use a constant time algorithm, but that's harder to do in a curve generic way and has a pretty significant performance impact (particular before the safegcd paper). Crypto noob here, but isn't modular in
3.
by fuklief 3y ago
I didn't know US/UK gov were against hybrids. AFAIU, the French and Germans are recommending hybrids as a first step before stand alone PQC [0]. [0]: https://cyber.gouv.fr/en/publications/follow-position-
4.
by fuklief 3y ago
This survey by the same author also provides a good comparison https://saaramar.github.io/memory_safety_blogpost_2022/
5.
Codasip delivers processor security to actively prevent most common cyberattacks(codasip.com)
1 points by fuklief 3y ago|0 comments
6.
CHERIoT: Complete Memory Safety for Embedded Devices [pdf](cheriot.org)
3 points by fuklief 3y ago|0 comments
7.
by fuklief 3y ago
I believe it means flattening the AST, here is a nice blog post about this technique https://www.cs.cornell.edu/~asampson/blog/flattening.html
8.
by fuklief 3y ago
I personally did not know about classes prépa before the last year of high school. I will forever be thankful for my maths teacher who told me about it that year, since I would have probably slacked off at university.
9.
by fuklief 3y ago
- Make them good at science, i.e., Maths and Physics. - Get them into a decent high school, e.g., Henri 4 or Louis Le Grand in Paris. - Hope they have good grades and manage to get into a good preparatory class [1], e.g., Henri 4, Louis Le
10.
by fuklief 3y ago
Maybe they thought it's spelled "your" instead of "you're".
11.
by fuklief 3y ago
> Google put in significant engineering effort into "Ryu", a parsing library for double-precision floating point numbers: https://github.com/ulfjack/ryu It's not a parsing library, but a printing one,
12.
Tillitis TKey(shop.tillitis.se)
3 points by fuklief 3y ago|0 comments
13.
by fuklief 4y ago
See CHERI and Arm Morello https://www.arm.com/blogs/blueprint/morello
14.
by fuklief 4y ago
> Probably was some dude’s L7 promo project in AWS. Actually a former CS prof at Maryland moving to industry. https://mhicks.me/
15.
by fuklief 4y ago
> In other words, CHERI can reduce memory-unsafety related slowdowns by two thirds, which is pretty incredible. AMD CPUs are even starting to have hardware support for it, bringing its run-time overhead down to 6.8%. Source on AMD CPUs h
16.
Information Flow Control Challenge(ifc-challenge.appspot.com)
1 points by fuklief 4y ago|0 comments
17.
Linux for Cheri RISC-V(github.com)
3 points by fuklief 4y ago|0 comments
18.
by fuklief 4y ago
I believe it means High Level Synthesis in this context.
19.
by fuklief 4y ago
You might be interested in [Catala]( https://catala-lang.org/en/ ), a domain specific language for implementing legislative texts. Iirc, they have worked on the french tax code, and are starting on the us one now.
20.
Reflets coincidentally invites itself in the Ukrainian police cars(reflets.info)
17 points by fuklief 5y ago|1 comments
21.
by fuklief 5y ago
I'm using the following for fonts. \usepackage[T1]{fontenc} \usepackage[utf8]{inputenc} \usepackage[largesc]{newpxtext} \usepackage{newpxmath} \usepackage[supsfam=newpx]{superiors}
22.
by fuklief 5y ago
Would virtual memory still be necessary on a capability machine architecture [0] ? My understanding is that would not be the case since all programs can only access memory that's been allocated to it. By definition, capabilities cannot
23.
by fuklief 5y ago
By "register allocation verifier", I meant the checker as mentioned in the post you quote.
24.
by fuklief 5y ago
In CompCert's case though, the register allocation verifier itself is verified. I'm not so sure the SMT solver used here are.
25.
Reticle: A Virtual Machine for Programming Modern FPGAs [pdf](homes.cs.washington.edu)
4 points by fuklief 5y ago|0 comments
26.
by fuklief 5y ago
Word on the block is that there is a RFC to add support for secret types in LLVM, and Rust is waiting for them to also provide it in Rust [0]. [0]: https://github.com/rust-lang/rfcs/pull/2859
27.
by fuklief 6y ago
> ... leakage by timing side-channels depends in parts on how accurate your time-measurements are (e.g. Javascript's timer resolution was degraded, in order to make transient failure attacks like Spectre harder [1]). But that doesn&
28.
by fuklief 6y ago
So what kind of formal verification is it ? Is it proof assistant, model checking ? And what does it verify ? It's not really clear from a first glance.
29.
by fuklief 6y ago
That sounds like a capability machine e.g., CHERI[1] It seems those might become relatively mainstream in a few years, as ARM seems to be jumping on board [2] [1]: https://www.cl.cam.ac.uk/research/security/ctsrd&#
30.
by fuklief 6y ago
If you pay for spotify, https://www.jqbx.fm/ can do that.

More ›